1
0
mirror of https://gitlab.gnome.org/GNOME/libxml2.git synced 2025-01-25 06:03:34 +03:00
libxml2/fuzz/regexp.c
Nick Wellnhofer 905820a44c Update fuzzing code
- Shorten timeouts
- Align options from Makefile and options files
- Add section headers to Makefile
- Skip invalid UTF-8 in regexp fuzzer
- Update regexp.dict
- Generate HTML seed corpus in correct format
2020-07-31 11:55:13 +02:00

44 lines
1.0 KiB
C

/*
* regexp.c: a libFuzzer target to test the regexp module.
*
* See Copyright for the status of this software.
*/
#include <libxml/xmlregexp.h>
#include "fuzz.h"
int
LLVMFuzzerInitialize(int *argc ATTRIBUTE_UNUSED,
char ***argv ATTRIBUTE_UNUSED) {
xmlSetGenericErrorFunc(NULL, xmlFuzzErrorFunc);
return 0;
}
int
LLVMFuzzerTestOneInput(const char *data, size_t size) {
xmlRegexpPtr regexp;
char *str[2] = { NULL, NULL };
size_t numStrings;
numStrings = xmlFuzzExtractStrings(data, size, str, 2);
/* CUR_SCHAR doesn't handle invalid UTF-8 and may cause infinite loops. */
if (xmlCheckUTF8(BAD_CAST str[0]) != 0) {
regexp = xmlRegexpCompile(BAD_CAST str[0]);
/* xmlRegexpExec has pathological performance in too many cases. */
#if 0
if ((regexp != NULL) && (numStrings >= 2)) {
xmlRegexpExec(regexp, BAD_CAST str[1]);
}
#endif
xmlRegFreeRegexp(regexp);
}
xmlFree(str[0]);
xmlFree(str[1]);
return 0;
}